Embedding Sense client in iframe yields authentication problem with Azure according to header X-Frame-Options = deny

StefanBackstrand — Mon, 19 Feb 2024 09:47:47 GMT

Trying to embed a Sense app into an iframe in a web app, but getting issues from Microsoft Azure AD (which is the IDP for the Qlik Cloud tenant). It seems that when the frame gets redirected to Azure for authentication, that in turn disallows embed, and so it fails to render.

"The loading of “https://login.microsoftonline.com/REDACTED” in a frame is denied by “X-Frame-Options“ directive set to “deny“."

Can we pre-auth the browser somehow with javascript to not have this redirect happen?

Re: Embedding Sense client in iframe yields authentication problem with Azure according to header X-Frame-Options = deny

jprdonnelly — Tue, 20 Feb 2024 15:53:50 GMT

@StefanBackstrand - absolutely!

Here's a forward looking framework, and here are some iFrame specific examples.

topic Embedding Sense client in iframe yields authentication problem with Azure according to header X-Frame-Options = deny in Integration, Extension & APIs

Embedding Sense client in iframe yields authentication problem with Azure according to header X-Frame-Options = deny

Re: Embedding Sense client in iframe yields authentication problem with Azure according to header X-Frame-Options = deny